Security audit

Identity Rebuild

Security checks for vulnerabilities and agentic risk

Overview

This skill is clearly aimed at identity-recovery journaling, but it asks agents to save sensitive personal reflections and uses an unpinned installer without enough disclosure or controls.

Install only if you are comfortable with this skill saving sensitive identity and mental-health-related reflections. Before using it, confirm where the saved state will live, how to delete it, and whether reminders can be disabled. Prefer a pinned or verified installer version rather than running the unpinned `npx` command.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (2)

T08 · Insecure Dependencies

Warning

Location: SKILL.md:14
Finding: Unpinned Package Retrieval and Execution Through npx
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Warning

Location: SKILL.md:45
Finding: Sensitive Psychological Journal Data Persisted Without Defined Safeguards
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (2)

Rp1

Medium

Category: MCP Rug Pull
Confidence: 94% confidence
Finding: The install command uses npx clawhub install identity-rebuild without pinning a specific package version, which means future installs may fetch whatever version is current at execution time. That creates a supply-chain risk: a compromised or malicious upstream release could be executed by users or agents with no integrity guarantee.
Content: No source excerpt is available for this finding.

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 79% confidence
Finding: The trigger schedule daily at evening is imprecise and does not clearly define when the skill should activate. In a manifest/markdown trigger section, this kind of vague timing can cause inconsistent or unintended invocations because 'evening' varies by user, locale, and system interpretation.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.